Tests OAuth 2.0 and OpenID Connect implementations for authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, scope escalation, and PKCE bypass, using Burp Suite Professional and the EsPReSSO extension to probe the authorization server, client, and token handling.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-oauth2-implementation-flawsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-oauth2-implementation-flaws -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-oauth2-implementation-flaws -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/testing-oauth2-implementation-flawsgh skill install mukul975/Anthropic-Cybersecurity-Skills testing-oauth2-implementation-flawsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/testing-oauth2-implementation-flaws ~/.claude/skills/testing-oauth2-implementation-flaws # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/testing-oauth2-implementation-flaws ~/.agents/skills/testing-oauth2-implementation-flaws # Codex, Cursor, Gemini CLI, Copilot, OpenCode